Privacy Policy

Last updated: July 29, 2026

This Privacy Policy describes how Chris Kohl ("we," "us," or "our"), operating TradeReign at trade-reign.com, collects, uses, and protects your personal information when you use our trading discipline enforcement application.

By using TradeReign, you agree to the collection and use of information in accordance with this policy.

Additional risk, platform, and marketing disclosures are available at /disclosures.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed password. If you sign in via Google OAuth, we receive your name, email address, profile image, provider account identifier, and authentication records needed to maintain your sign-in.

Broker Authorization and Trading Data

TradeReign connects to Tradovate through Tradovate's OAuth authorization flow. You sign in with Tradovate on Tradovate's site; TradeReign does not ask for or store your Tradovate password. After you approve the connection, we store encrypted OAuth access and refresh tokens, your broker identity, connection status, and the Demo or Live account you select.

To provide monitoring, performance reporting, and rule enforcement, we process broker account information such as account identifiers and names, balances, profit and loss, positions, orders, fills, strategies, and related timestamps and instrument details.

Rule, Journal, and Enforcement Data

We store your configured trading rules and preferences so they persist across sessions. This includes rule thresholds, enabled/disabled states, Commitment Mode and lockout state, journal entries, and UI preferences. When a rule is evaluated or enforced, we may store violations, decisions, position and broker-response evidence, actions taken, and timestamps. This supports the dashboard, troubleshooting, enforcement integrity, and dispute review.

Billing and Trial Information

We store Stripe customer and subscription identifiers, billing and trial status, relevant dates, and cancellation feedback supplied through Stripe. We do not store full payment-card numbers or card security codes. To enforce the one-trial policy, TradeReign may retain one-way hashes derived from previously used broker and payment-method identities.

Operational and Usage Data

We record limited first-party operational information such as signup and broker-connection events, recent application activity, requested paths, error reports, diagnostic metadata, IP address, browser user agent, and approximate country, region, or city when supplied by our network infrastructure. We use this information for security, fraud prevention, support, reliability, and product operations. We do not use third-party advertising analytics or sell this information for advertising.

Communications

If you contact us, submit feedback, or receive an account-related email, we may store the message, delivery status, outreach campaign, and related account context so we can respond and avoid sending duplicate messages.

2. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your account
• Connect to your Tradovate account via their API to monitor and enforce your trading rules in real time
• Persist your rule settings and preferences across sessions
• Display performance, journal, and violation history within the dashboard
• Maintain reliable and auditable rule-enforcement records
• Process billing, administer trials, and prevent repeated-trial abuse
• Detect errors, secure the service, and investigate misuse
• Communicate with you about your account, support requests, or service updates

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Application data is stored in a PostgreSQL database hosted on Railway. Tradovate OAuth tokens and authenticator two-factor secrets are encrypted using key-identified AES-256-GCM encryption with dedicated server-side encryption keys. Passwords for TradeReign email/password accounts are hashed using bcrypt and are not stored in plain text.

All data transmission between your browser and our servers uses HTTPS/TLS encryption. We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4. Third-Party Services

TradeReign integrates with the following third-party services:

• Tradovate — Tradovate handles broker sign-in and authorization. TradeReign uses the resulting OAuth authorization to read supported account data and send supported actions needed to monitor and enforce your configured rules.
• Google OAuth — If you choose to sign in with Google, your authentication is handled by Google. We receive account identifiers and basic profile information needed to create and authenticate your TradeReign account.
• Stripe — Payment processing is handled by Stripe. We do not store full payment-card numbers or card security codes. Stripe sends TradeReign subscription, trial, cancellation, and limited payment-method identity information needed for billing and abuse prevention.
• Resend — Resend delivers verification, password-reset, onboarding, support, and other account-related email. The recipient address and message content are provided to Resend for delivery.
• Railway and network providers — Our application and database are hosted on Railway. Infrastructure and network providers may process IP addresses and technical request data to deliver and protect the service.
• Economic calendar providers — TradeReign retrieves economic-release schedules from official government sources and backup calendar providers. TradeReign does not send your personal or broker-account data with those calendar requests.

5. Cookies

TradeReign uses session cookies to maintain your authenticated login state. These are necessary for the application to function and cannot be disabled while using the service. We do not use advertising or tracking cookies.

6. Data Retention

We retain account, rule, journal, trading, billing, and operational data for as long as reasonably necessary to provide and secure TradeReign, maintain your requested history, troubleshoot problems, enforce billing and trial restrictions, and satisfy legal or dispute-related obligations. Observed broker fills and high-frequency daily P&L audit snapshots are currently pruned after approximately 400 days. Other records may be kept longer when needed for account operation, security, enforcement evidence, billing, support, or legal compliance.

You may request account deletion by contacting us. We will delete or de-identify personal data that we are not required or permitted to retain. Residual copies may remain temporarily in protected backups until those backups expire under their normal schedules.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion or restriction of eligible personal data
• Export your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

TradeReign is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. Your continued use of TradeReign after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: